Even at the real numbers, he is an affiliate and has resale restrictions. By not informing every one of his financial institutions of his affiliate status of a public company, he is committing financial fraud.
One of us should contact the FRB and turn him in. They will restrict every account he has (and yes they have a database and can find them all in 60 seconds), the FRB will contact every financial institution in which he has an account or is a beneficiary. Most likely, they will all require him to take physical delivery of his certificates and close his accounts.
I hate to say it, but I have done this a few times to retail clients. I know the process.